Issue when changing mac address

[summershrimp]

we want to change mac addr to something like 00:xx:xx:xx:xx:xx to meet our special requirement,
but according to the codes, it is only allowed to set to Locally Administered MAC addresses x2:xx x6:xx xA:xx xE:xx

tap-windows6/src/adapter.c

Lines 185 to 187 in 0cad866

	if ((ETH_IS_MULTICAST(configAddress)
	|| ETH_IS_BROADCAST(configAddress))
	|| !NIC_ADDR_IS_LOCALLY_ADMINISTERED(configAddress))

https://github.com/OpenVPN/tap-windows6/blob/master/src/adapter.h#L47-L48

Can we remove that restriction?

[selvanair]

This did come up in the past, and no one seems to know why the restriction was put in place. See the following link and few comments that follow.
#97 (comment)

Likely there is no strong reason, as many hardware NICs allow to set any valid unicast MAC address.

That said, there is little appetite for digging deep into this -- make a locally modified driver and get it signed may be your best option.

[summershrimp]

Thanks for reply. And sure we can compile our own code, but we don't have trusted cert to sign it. Using self-signed testing cert need to disable Secure Boot and we can't do that in our business environment. Is it still possible to remove that restriction in the upstream release ?

[kabassanov]

Hello,

I think that it would be interesting to have it unblocked also... In particular it might be useful to those who would clone the ethernet address of a physical NIC onto the tap for further actions on the server side...

Any chance?